mirror of
https://tangled.org/evan.jarrett.net/at-container-registry
synced 2026-09-01 07:46:55 +00:00
89 lines
3.4 KiB
YAML
89 lines
3.4 KiB
YAML
# ATCR Hold Service Configuration
|
|
# Generated with defaults — edit as needed.
|
|
|
|
# Configuration format version.
|
|
version: "0.1"
|
|
# Log level: debug, info, warn, error.
|
|
log_level: info
|
|
# Remote log shipping settings.
|
|
log_shipper:
|
|
# Log shipping backend: "victoria", "opensearch", or "loki". Empty disables shipping.
|
|
backend: ""
|
|
# Remote log service endpoint, e.g. "http://victorialogs:9428".
|
|
url: ""
|
|
# Number of log entries to buffer before flushing to the remote service.
|
|
batch_size: 100
|
|
# Maximum time between flushes, even if batch is not full.
|
|
flush_interval: 5s
|
|
# Basic auth username for the log service (optional).
|
|
username: ""
|
|
# Basic auth password for the log service (optional).
|
|
password: ""
|
|
# S3-compatible blob storage settings.
|
|
storage:
|
|
# S3-compatible access key (AWS, Storj, Minio, UpCloud).
|
|
access_key: ""
|
|
# S3-compatible secret key.
|
|
secret_key: ""
|
|
# S3 region, e.g. "us-east-1". Used for request signing.
|
|
region: us-east-1
|
|
# S3 bucket for blob storage (REQUIRED). Must already exist.
|
|
bucket: ""
|
|
# Custom S3 endpoint for non-AWS providers (e.g. "https://gateway.storjshare.io").
|
|
endpoint: ""
|
|
# HTTP server and identity settings.
|
|
server:
|
|
# Listen address, e.g. ":8080" or "0.0.0.0:8080".
|
|
addr: :8080
|
|
# Externally reachable URL used for did:web identity (REQUIRED), e.g. "https://hold.example.com".
|
|
public_url: ""
|
|
# Allow unauthenticated blob reads. If false, readers need crew membership.
|
|
public: false
|
|
# Use localhost for OAuth redirects during development.
|
|
test_mode: false
|
|
# Request crawl from this relay on startup to make the embedded PDS discoverable.
|
|
relay_endpoint: ""
|
|
# Read timeout for HTTP requests.
|
|
read_timeout: 5m0s
|
|
# Write timeout for HTTP requests.
|
|
write_timeout: 5m0s
|
|
# Auto-registration and bootstrap settings.
|
|
registration:
|
|
# DID of the hold captain. If set, auto-creates captain and profile records on startup.
|
|
owner_did: ""
|
|
# Create a wildcard crew record allowing any authenticated user to join.
|
|
allow_all_crew: false
|
|
# URL to fetch avatar image from during bootstrap.
|
|
profile_avatar_url: https://imgs.blue/evan.jarrett.net/1TpTOdtS60GdJWBYEqtK22y688jajbQ9a5kbYRFtwuqrkBAE
|
|
# Post to Bluesky when users push images. Synced to captain record on startup.
|
|
enable_bluesky_posts: false
|
|
# Deployment region, auto-detected from cloud metadata or S3 config.
|
|
region: ""
|
|
# Embedded PDS database settings.
|
|
database:
|
|
# Directory for the embedded PDS database (carstore + SQLite).
|
|
path: /var/lib/atcr-hold
|
|
# PDS signing key path. Defaults to {database.path}/signing.key.
|
|
key_path: ""
|
|
# Admin panel settings.
|
|
admin:
|
|
# Enable the web-based admin panel for crew and storage management.
|
|
enabled: false
|
|
# Storage quota tiers. Empty disables quota enforcement.
|
|
quota:
|
|
# Quota tiers keyed by rank name. Each tier has a human-readable quota limit.
|
|
tiers:
|
|
bosun:
|
|
# Storage quota limit (e.g. "5GB", "50GB", "1TB").
|
|
quota: 50GB
|
|
deckhand:
|
|
# Storage quota limit (e.g. "5GB", "50GB", "1TB").
|
|
quota: 5GB
|
|
quartermaster:
|
|
# Storage quota limit (e.g. "5GB", "50GB", "1TB").
|
|
quota: 100GB
|
|
# Default tier assignment for new crew members.
|
|
defaults:
|
|
# Tier assigned to new crew members who don't have an explicit tier.
|
|
new_crew_tier: deckhand
|